Compliance "Best Practices"
News, Commentary and Resources Regarding Compliance for Registered Investment Advisers

Important Information - Custody Notice Provision

February 13th, 2010

As we all know by now, investment advisers that send out their own statements to clients are required to place a notice on any such statement “urging” the client to compare the adviser’s information with the statement sent by the client’s qualified custodian. From my conversations with clients and other compliance professionals, the prevailing wisdom is that unless the statement sent by the investment adviser contains much of the same type of information sent by qualified custodian, it is not a “statement” and no notice is required. I have come to find out that this is wrong, wrong, wrong. One of my clients - who always seems to know more than I do - spoke with a representative of the SEC and was told point blank that the SEC intended to use the term “statement” generically and that if the “statement”, “report”, “appraisal” or whatever other term an adviser applied to what they send to clients “contains account balance information” then it is a statement and must have the required notice. Therefore, even if what the adviser sends to clients does not contain transactional information or even holdings information, the SEC would expect to see a version of the following notice:

“Pursuant to recent amendments to Rule 206(4) under the Investment Advisers Act of 1940, the Securities and Exchange Commission now requires us to urge clients to compare the information set forth in this statement with the statements you receive directly from your custodian to ensure that all account transactions are proper.”

More on the Surprise Audit

February 11th, 2010

I have a great client that always challenges me with well, challenging compliance questions. His latest was something along the lines of:

“In the case where an adviser representative has a general power of attorney for a client, and thereby has access to a client’s bank accounts as well as brokerage accounts, do you think the requirement to reconcile statements as well as the scope of the audit extend to these bank accounts or would it be confined to accounts over which the adviser provides advice?”

My response was as follows:

The following language can be found in the Final Rule Release:

“Advisers also should consider developing policies regarding the ability of individual employees to acquire custody of client assets (i.e., as trustees for client assets), because their custody may be attributable to the firm, which will thereby acquire responsibility for those assets under the rule.”

While the SEC offers no examples of when it “may or may not” be attributable to the firm, at least they contemplated such a situation. Since it is ambiguous, however, maybe the tipping point could be something along the lines of whether the firm provides advice to the client. I just cannot say for sure. It may have to be one of those things that must wait until either an audit or a no-action letter.

Fact Sheet - Internal Control Report

February 9th, 2010

Requirement

When a related person serves as a qualified custodian for advisory client funds or securities, an adviser must receive from its related person, no less frequently than once each calendar year, a written report, which includes an opinion from an independent public accountant with respect to the related person’s controls relating to custody of client assets.

Objective

The objective of the examination supporting the internal control report is to obtain reasonable assurance that the related party’s controls have been placed in operation as of a specific date and are suitably designed and are operating effectively to meet control objectives related to custody of funds and securities.

PCAOB Registration and Inspection

The internal control report must be prepared by an independent public accountant that is registered with, and subject to regular inspection by, the Public Company Accounting Oversight Board (“PCAOB”).

Internal Control Report

The internal control report should address control objectives and associated controls related to the areas of client account setup and maintenance, authorization and processing of client transactions, security maintenance and setup, processing of income and corporate action transactions and client reporting.

The internal control report objectives should include:

· Documentation for the opening and modification of client accounts is received, authenticated, and established completely, accurately, and timely on the applicable system.

· Client transactions, including contributions and withdrawals, are authorized and processed in a complete, accurate, and timely manner.

· Trades are properly authorized, settled, and recorded completely, accurately, and timely in the client account.

· New securities and changes to securities are authorized and established in a complete, accurate and timely manner.

· Securities income and corporate action transactions are processed to client accounts in a complete, accurate, and timely manner.

· Physical securities are safeguarded from loss or misappropriation.

· Cash and security positions are reconciled completely, accurately and on a timely basis between the custodian and depositories.

· Account statements reflecting cash and security positions are provided to clients in a complete, accurate and timely manner.

As part of the internal control report, the independent public accountant must verify that funds and securities are reconciled to a custodian other than the adviser or its related person (for example, the Depository Trust Corporation). The accountant’s tests of the custodian’s reconciliation(s) should include either direct confirmation, on a test basis, with unaffiliated custodians or other procedures designed to verify that the data used in reconciliations performed by the qualified custodian is obtained from unaffiliated custodians and is unaltered.

The accountant’s internal control report should identify the control objectives included within the scope of the examination and include the accountant’s opinion as to whether controls have been placed in operation as of the specific date, and are suitably designed and are operating effectively to meet the identified control objectives during the specified period. The report should also describe the nature, timing, extent and results of the accountant’s procedures performed to verify that funds and securities are reconciled to depositories and other unaffiliated custodians.

U.S. Compliance Consultants Web Site

February 7th, 2010

I am pleased to announce that an upgrade to the U.S. Compliance Consultants web site is just a few days away. Information on the registration requirements of all 49 states will be available for viewing (remember that Wyoming does not register state investment advisers). This upgrade will allow potential state registrants to see exactly what each state requires in order to register as an investment adviser. No other compliance consultant company maintains a web site with such comprehensive information.

Custody Rule Guidance for Accountants

February 5th, 2010

As detailed in this blog ad nauseam, the Securities and Exchange Commission (“SEC”) has adopted amendments to the custody rules under the Investment Advisers Act of 1940 (“Advisers Act”). The most onerous of these changes is the requirement that investment advisers with custody of client funds or assets obtain a surprise examination from an independent public accountant.

As part of these wholesale revisions, the SEC also published interpretive guidance for independent public accountants. This guidance provides direction with respect to the independent verification and internal control report as required under the rule. For a sample of client accounts, the accountant is required to obtain records of the purchases, sales, contributions, withdrawals and any other debits or credits to each selected client’s account occurring since the date of the last examination. In order for the accountant’s procedures to meet the objective of the examination, it should include the following with respect to each selected client account:

  1. Confirmation with the qualified custodian(s) of client funds and securities as of the date of the examination and that the client’s funds and securities are held in either a separate account under the client’s name or in accounts under the name of the investment adviser as agent or trustee for clients;
  2. Confirmation with the client of funds and securities held in the account as of the date of the examination and contributions and withdrawals of funds and securities to and from the account since the date of the last examination; where confirmation replies are not received, the accountant should perform alternative procedures; and
  3. Reconciliation of confirmations received and other evidence obtained to the investment adviser’s records.

Rule 206(4)-2(a)(6) establishes additional requirements for an investment adviser that itself, or its related person, maintains client funds or securities as a qualified custodian in connection with advisory services provided to clients. Such an investment adviser must at least once each calendar year obtain or receive from its related person an internal control report related to its or its affiliates’ custody services, including the safeguarding of funds and securities, prepared by an independent public accountant that is registered with, and subject to inspection by, the PCAOB.

The internal control report objectives should include:

  • Documentation for the opening and modification of client accounts is received, authenticated, and established completely, accurately, and timely on the applicable system.
  • Client transactions, including contributions and withdrawals, are authorized and processed in a complete, accurate, and timely manner.
  • Trades are properly authorized, settled, and recorded completely, accurately, and timely in the client account.
  • New securities and changes to securities are authorized and established in a complete, accurate and timely manner.
  • Securities income and corporate action transactions are processed to client accounts in a complete, accurate, and timely manner.
  • Physical securities are safeguarded from loss or misappropriation.
  • Cash and security positions are reconciled completely, accurately and on a timely basis between the custodian and depositories.
  • Account statements reflecting cash and security positions are provided to clients in a complete, accurate and timely manner.

The accountant’s internal control report should identify the control objectives included within the scope of the examination and include the accountant’s opinion as to whether controls have been placed in operation as of the specific date, and are suitably designed and are operating effectively to meet the identified control objectives during the specified period. The report should also describe the nature, timing, extent and results of the accountant’s procedures performed to verify that funds and securities are reconciled to depositories and other unaffiliated custodians.

Why Can’t the SEC Get It Right?

February 4th, 2010

Is anyone else bemused at the SEC’s inability to get it right?  The SEC issued a new custody rule that not only neglects to consider future custodial practices, but ignores current practices as well. As you should know by now, the SEC has created a new “due inquiry” standard for investment advisers when forming a reasonable belief that a client’s qualified custodian sends out account statements. And yet, they are without any clue as to how an adviser that has clients that can only obtain account statements by accessing the statement via the custodian’s web site can satisfy the due inquiry standard. Do they want everyone to go back to receiving paper statements? Not very green if you ask me. Did they even consult with the larger custodians such as Schwab, Fidelity or TD Ameritrade?

Custody Rule Checklist

February 2nd, 2010

This checklist may help you make sense of the new custody rule:

Delivery of Account Statements

Applicability: Any adviser that uses a qualified custodian.

Requirement: Reasonable belief that the qualified custodian sends at least quarterly account statements may only be formed after the adviser makes due inquiry.

Example #1: Custodian Sends Paper Account Statements

The adviser should receive a duplicate copy directly from the custodian.

Example #2: Custodian Emails Account Statements

The adviser should be “cc’d” on the email sent to the client.

Example #3: Custodian Requires Client (or Client Elects) to Access Account Statements via the Custodian’s Web Site

To be determined

Notice to Clients

Applicability: Any adviser that sends account statements to clients.

Requirement: Account statements must contain a notice provision urging the client to compare the adviser’s account statement to that of the qualified custodian’s.

Sample #1: In order to ensure that all account transactions are proper, [insert name your advisory firm] urges you to compare the information set forth in this statement with the statements you receive directly from your custodian.

Sample #2: Pursuant to recent amendments to Rule 206(4) under the Investment Advisers Act of 1940, the Securities and Exchange Commission now requires us to urge clients to compare the information set forth in this statement with the statements you receive directly from your custodian to ensure that all account transactions are proper.

Sample #3: Please compare the information set forth in this statement with the statements you receive from directly from your custodian to ensure that all account transactions are proper.

Surprise Examination

Applicability: Any adviser that is deemed to have custody over client funds or assets (other than by reason of the direct deduction of fees).

Requirement: Each investment adviser subject to the surprise examination requirement must enter into a written agreement with an independent public accountant to conduct the surprise examination.

The agreement must require the accountant, among other things:

· To submit Form ADV-E via the IARD system to the SEC accompanied by the accountant’s certificate within 120 days of the time chosen by the accountant for the surprise examination, stating that the accountant has examined the funds and securities and describing the nature and extent of the examination;

· To notify the SEC within one business day of finding any material discrepancy during the course of the examination; and

· To file via the IARD system, upon dismissal or resignation within four business days a statement regarding the termination along with Form ADV-E.

The audit must be conducted by an accounting firm registered with, and subject to regular inspection by, the Public Company Accounting Oversight Board.

Compliance Policies and Procedures

Applicability: Any adviser that is deemed to have custody over client funds or assets.

Requirement: Additional compliance policies and procedures.

· Conducting background and credit checks on employees of the investment adviser who will have access (or could acquire access) to client assets to determine whether it would be appropriate for those employees to have such access;

· Requiring the authorization of more than one employee before the movement of assets within, and withdrawals or transfers from, a client’s account, as well as before changes to account ownership information;

· Limiting the number of employees who are permitted to interact with custodians with respect to client assets and rotating them on a periodic basis; and

· If the adviser also serves as a qualified custodian for client assets, segregating the duties of its advisory personnel from those of custodial personnel to make it difficult for any one person to misuse client assets without being detected.

Annual Review

February 1st, 2010

Overview

In accordance with Rule 206(4)-7(b) under the Advisers Act, an investment adviser is required to perform an annual review of its compliance policies and procedures to determine whether they are adequate, current and effective in view of the advisory firm’s businesses, advisory services, and regulatory requirements.

In this review, the Chief Compliance Officer (or other designated individual(s)) is required to consider (i) any compliance matters that arose during the previous year; (ii) any changes in the advisory activities of the advisory firm; (iii) any previous SEC and other applicable regulatory examination deficiency letters (to confirm that past deficiencies were corrected and are not reoccurring); and (iv) any changes in the Advisers Act and other applicable laws and regulations that might suggest the need to revise certain policies and procedures.

Goals of the Annual Review

Determine whether the Procedures are Adequate

1.    Do the procedures address all applicable areas of the advisory firm’s business?

2.    Have all laws and rules been cited?

3.    Do the procedures require the advisory firm to do what the rules require?

Determine how Effectively the Advisory Firm’s Procedures have been Implemented

1.    Are they reasonably designed to detect violations and promptly correct any violations that have occurred?

2.    Is there sufficient: (i) supervision; (ii) employee training; (iii) forensic testing; and (iv) problem detection and correction?

Methodology for Conducting the Annual Review

Step 1:     Review the inventory of the compliance obligations under state and federal laws, SEC rules, contracts with clients, offering documents and disclosures made to clients.  Review should include:

* Identification of recent SEC exams including any deficiencies raised and any corrective actions taken;

* Identification of the advisory firm’s interim reviews and other audits and any follow-up or corrective action;

* Identification of any serious compliance issues that arose at the advisory firm in the past year;

* Identification of any serious compliance issues that arose in the investment advisory industry in the past year;

* Identification of violations reported pursuant to the advisory firm’s code of ethics;

* Analysis of compliance implications of any new businesses, discontinued businesses and change in the advisory firm’s operations during the past year;

* Analysis of new statutory or regulatory requirements that impact the advisory firm’s business;

* Identification of “hot topics” identified by the SEC staff;

* Description of how the advisory firm sought to identify risk; and

* Description of how the advisory firm went about assessing the effectiveness of critical controls.

Step 2:    Compare the inventory of obligations against existing procedures:

* Determine whether the procedures specify the actions to be taken to achieve compliance;

* Identify any gaps and determine whether new procedures need to be developed or current procedures enhanced to address such gaps; and

* Determine whether new obligations arose as a result of new products offered or new regulations were adopted since the last review.

Step 3:    Assess the effectiveness of existing procedures and how well the advisory firm is implementing the procedures as currently written. For each procedure evaluate whether the procedure:

* Makes violations less likely;

* Results in prompt identification of violations;

* Collects in a timely fashion the information necessary to allow the advisory firm to correct problems as they are identified;

* Is written in plain English articulating the goal of compliance and how it is supervised; and

* Is adequately supervised by responsible personnel of the advisory firm.

Step 4:    Engage in a risk-assessment strategy that targets high-risk areas of the advisory firm’s business.

* Review well-recognized areas of conflicts of interest present in the advisory firm’s operations (i.e. personal trading accounts, allocation of aggregated orders and advertising materials);

* Identify any conflicts that, if left unmitigated, could result in harm to the advisory firm’s clients; and

* Develop procedures to mitigate or eliminate these conflicts.

Step 5:    Test and assess the procedures periodically.

* Use “forensic testing” including the examination of samples of accounts, transactions, communications for consistency with the advisory firm’s procedures, compliance with the law and outcomes for clients.

Documentation of Findings

As part of the annual review, the advisory firm should document the following:

* Whether the compliance policies and procedures continue to be reasonably designed to prevent and detect violations of the Advisers Act and its rules;

* Whether the compliance policies and procedures are being adequately carried out by accountable personnel of the advisory firm; and

* Whether any customer harm resulted from any significant compliance deficiency that was uncovered as part of the annual review.

New Custody Rule - Same Old SEC

January 29th, 2010

Is anyone else surprised that the “new” SEC custody rule does not take into account current custodial practices (let alone future practices). It seems to have escaped the notice of the SEC that most custodians have gone green (okay, are trying to save money) by eliminating the delivery of paper account statements. At a recent CCOutreach session, a client asked a SEC official if would it be enough (e.g., would it constitute due inquiry) to call those clients that must access their account statements via the custodian’s web site to confirm that they did indeed access such statements? The SEC official responded:

“It is not clear how you would be able to derive a reasonable belief from this information. Just because the client says they were delivered the statements, how do you know they actually did receive them? Does the client know who all their custodians are, and do they remember receiving all of them at the time you are asking them?”

Of course, the same SEC official refused to say what would constitute due inquiry under these circumstances. Perhaps investment advisers need to have their clients take lie detector tests or better yet, perhaps advisers need to station an employee in each client’s home to confirm that the client accessed all their account statements.


Custody Rule - Due Inquiry Standard

January 28th, 2010

Yesterday I had an informative discussion with Vivien Liu about one troubling aspect of the new SEC Custody Rule. Ms. Liu is Senior Counsel at the SEC and one of the primary drafters of the new rule.

Due Inquiry

Among the many new requirements under the Custody Rule, the one that will affect almost every SEC-registered investment adviser is the requirement that an adviser can only form a reasonable belief that the qualified custodian sends account statement directly to clients after “due inquiry”.

What then, as many of our client’s have asked, suffices as “due inquiry”?

Account Statements Sent by Mail

If the qualified custodian sends out paper copies of account statements to the client, the adviser can satisfy the “due inquiry” standard by receiving a duplicate account statement directly from the custodian.

Electronic Account Statements

It becomes a bit more problematic when custodians do not send paper copies of the account statement and either (1) email the statement to clients or (2) make the statement available to clients via the custodian’s web site (whether this is at the option of the client or the policy of the custodian).

Accordingly to Ms. Liu, if the custodian emails account statements, then “due inquiry” would be satisfied if the adviser was “cc’d” on any such email. In effect, this would be analogous to the adviser receiving a duplicate paper copy via regular mail.

It is the second scenario - where the client must access the account statement via the custodian’s web site - that prompted my call to the SEC. This is because a footnote in the new rule states that:

“Advisers are not permitted to satisfy the requirement of forming a reasonable belief after “due inquiry” by accessing qualified custodian account statements through the custodian’s website. Accessing account statements through the website merely confirms that they are available. If an adviser does not take additional steps to determine whether account statements were sent to clients, or that clients obtained statements through the website, the adviser would have an inadequate basis for forming a reasonable belief, after due inquiry, that the qualified custodian sends account statements to clients.”

When the question of what “additional steps” an adviser must take in this situation was put to Ms. Liu, she agreed that there was no obvious solution. Hardly encouraging. However, Ms. Liu did state that the SEC would probably issue a clarification in the coming weeks which, of course, will prompt yet another Client Alert! Our view on the matter - beyond surprise that the SEC did not seem to take current custodial reporting practices into account when formulating the new rule - is that the “additional step” that an adviser must take is follow-up phone calls to clients to confirm that they actually accessed their account statements.

I know, I know . . . outrageously time-consuming, onerous and unfairly burdensome. Guilty on all three counts. However, until the SEC issues some clarification, this seems to be the only way to satisfy the due inquiry requirement in this situation. Though many of you think us infallible (and rightly so) we are certainly open to other suggestions as to how to best handle this troubling scenario.